Last updated: August 2026
This policy explains what personal data we collect through elsmart.bg, why we process it, how long we keep it and what rights you have. It is written in plain language, without unnecessary legal jargon.
The data controller is El Smart Ltd, company number 204353117, registered at Botevgradsko Logistics Park, 228 Botevgradsko Shosse Blvd, 1839 Sofia, Bulgaria.
For any question about your personal data, write to office@elsmart.bg.
The site has no user accounts, online shop or payments. We collect personal data only when you send it to us yourself:
Through the contact form: name, phone, email address and the text of your enquiry.
Through the job application form: name, phone, email address, position of interest, the attached CV and an optional message.
Automatically: our hosting provider records standard technical data on every visit – IP address, browser type, date and time. This serves security and server maintenance and is not used for profiling.
To answer your enquiry – the basis is your request and our legitimate interest in responding to enquiries addressed to the company.
To consider your job application – the basis is your explicit consent, given via the checkbox in the form. You may withdraw it at any time.
For site security – the basis is our legitimate interest in keeping the site running and protected.
We do not use your data for advertising, we do not sell it and we do not build user profiles.
Contact form enquiries – up to 12 months from our last communication. If an enquiry leads to a contract, the data is kept for the periods required by accounting and tax law.
Job applications – up to 6 months from receipt. The attached CV is not stored on the website server: the file is attached to the email and deleted immediately after sending. If we would like to keep your application longer, we will ask you separately.
Technical logs – according to the hosting provider’s policy, typically a few weeks.
We do not provide personal data to third parties for their own purposes. Access is limited to:
Our hosting provider, which maintains the website server and mailboxes, acting as a data processor under contract.
Public authorities, where we are required to do so by law.
Data is stored on servers within the European Union. We do not transfer personal data outside the EU.
Under the General Data Protection Regulation (GDPR) you have the right to:
access the data we hold about you;
request rectification of inaccurate data;
request erasure of your data;
request restriction of processing;
object to processing based on legitimate interest;
receive your data in a portable format;
withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, write to office@elsmart.bg. We respond within one month.
The site runs over an encrypted connection (HTTPS). Access to the administration area is limited to individual employees with personal accounts. We apply technical and organisational measures against unauthorised access, loss or disclosure of data.
If you believe we process your data unlawfully, you may lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, phone +359 2 915 3518, www.cpdp.bg.
We may update this policy if our activities or the law change. The current version is always at this address, and the date of the last revision is shown at the top.
Write to us at office@elsmart.bg and we will get back to you.
